Re: suggestion for checking unicode characters against "trojan source attacks"

[Felix Lechner <felix.lechner@lease-up.com>]

Dear Jérémy,

> grep -r $'[\u061C\u200E\u200F\u202A\u202B\u202C\u202D\u202E\u2066\u2067\u2068\u2069]'

I implemented this in Perl both for file names, which I think may be
more important, and the contents of all files that identify as text
via file(1). The tag is called 'unicode-trojan'. [1] You should see
the results on the website in about a day.

For good measure, we check patched source files as well as files
shipped in installation packages.

I also added test cases to our test suite.

Thanks for the suggestion!

Kind regards
Felix Lechner

[1] https://salsa.debian.org/lintian/lintian/-/commit/d96d2930f17669f0a9509d1a1d319525d8064072